Privacy Policy (Draft)
Status: draft for independent legal review before any real customer data is handled.
Plain-English summary: BillWatch watches your bills and flags savings. We collect as little as possible, we never sell your data, and we never move your money.
What we collect
- Your email address and API keys (we store only SHA-256 hashes of keys, never the keys).
- Bill data you upload (e.g. CSV exports). Sandbox phase: synthetic/demo data only. No live bank connections yet.
- Basic API access logs for security and debugging.
What we never do
- Never sell your personal data.
- Never move money, pay bills, cancel subscriptions, or contact providers. Spotter, not handler.
- Never use your bill data to train AI models. Never share it with advertisers.
AI agents
Your agent connects with an API key you issue, sees only what the key permits, and you can revoke it any time. Approving or dismissing a finding always needs your explicit instruction.
Retention & your rights
Uploaded data is deleted within 30 days of account closure. Access logs are kept 90 days. You may request a copy, correction, or deletion of your data any time.
Not financial advice
BillWatch surfaces facts about your bills. This is general information only, not financial advice.